A Quantitative Method for the DNS Isolation Management Risk Estimation

Siyu Liang,Xinda Cheng,Shen Su,Zhihong Tian,Le Wang,Yu Jiang

doi:10.3390/electronics9060922

Abstract

The domain name system (DNS) is an important infrastructure of the Internet, providing domain name resolution services for almost all Internet communication systems. However, the current DNS is centrally managed, leading to unfair sovereignty of the Internet among countries. A domestic DNS is unable to work normally, noted as isolated management risk (IMR), especially when the national network is isolated from the rest of the Internet. To improve understanding of the DNS isolated management risk for better DNS resource deployment, it is critical to determine how serious the IMR is among various countries. In order to quantify DNS isolated management risk, this paper proposed an effective approach to collect DNS resolution demand data from the network used by various intelligent devices and to conduct data analysis to estimate isolated management risk of certain country’s domestic DNSs. Our idea is to quantify the domain name resolution demand and its relationship with the overseas resolution processes. We further used our quantitative method to compare the IMR of the USA and China and analyzed the difference between them.

Highlights

As an important infrastructure of the Internet, the domain name system (DNS) [1] provides domain name resolution services for the majority of network communication systems
We present a method for quantitative analysis of isolated management risk (IMR) and proportion of overseas server dependency domain (POSD), and we put forward a method for measuring data collection
To distinguish whether user DNS resolution demands are affected by the isolated attack, we propose a definition, overseas server dependency domain (OSD), to mark domain names affected by an isolated attack

Summary

Introduction

As an important infrastructure of the Internet, the DNS (domain name system) [1] provides domain name resolution services for the majority of network communication systems. With the development of intelligent communication systems in recent years, the Internet plays a more important role. As a basic support for maintaining operation of the Internet worldwide, the DNS has become more and more influential. This paper focuses on the security issues of the DNS. The design and management of the DNS is centralized. In a related work [2], Professor

Objectives

Methods

Results

Conclusion